684e0a4485440b4cb08c0e55a002f3dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

684e0a4485440b4cb08c0e55a002f3dc
Size

306KB
MD5

684e0a4485440b4cb08c0e55a002f3dc
SHA1

d91df6954676664f07995a143edde35b12d4c81a
SHA256

04dd3c202ac7f3bed395f8c97608b4bf773cf16bba69c42ed669419a63f79e64
SHA512

63ffa806bce7a5ca03153bf11c67c11cd61e6c7a204c787c8aa08c8d43eefec27ab4eaf0e5e16c6567a0a570d250274bd972101b37692da859a4ea535a851684
SSDEEP

6144:YnTrLC/lnqqC7mUEAmrcoml4AcF732jxthwGfQON6NhcRK6bc4a:Y/LC/UqC7VzocwNGXhyON2cRK6bva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
684e0a4485440b4cb08c0e55a002f3dc

Files

684e0a4485440b4cb08c0e55a002f3dc
.exe windows:4 windows x86 arch:x86

06dce73856ab34008f34a5ead8a7cfd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
GetStartupInfoA
ExitProcess
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ